Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 4:08 p.m.•12 views

CVE-2020-11064

In TYPO3 CMS greater than or equal to 9.0.0 and less than 9.5.17 and greater than or equal to 10.0.0 and less than 10.4.2, it has been discovered that HTML placeholder attributes containing data of other database records are vulnerable to cross-site scripting. A valid backend user account is need...

5.4CVSS6.2AI score0.0054EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2020/05/13 11:17 p.m.•88 views

Cross-Site Scripting in TYPO3 CMS Form Engine

In TYPO3 CMS greater than or equal to 9.0.0 and less than 9.5.17 and greater than or equal to 10.0.0 and less than 10.4.2, it has been discovered that HTML placeholder attributes containing data of other database records are vulnerable to cross-site scripting. A valid backend user account is need...

5.4CVSS1AI score0.0054EPSS
SaveExploits0References6Affected Software2
OSV
OSV
•added 2020/05/13 11:17 p.m.•32 views

GHSA-43GJ-MJ2W-WH46 Cross-Site Scripting in TYPO3 CMS Form Engine

In TYPO3 CMS greater than or equal to 9.0.0 and less than 9.5.17 and greater than or equal to 10.0.0 and less than 10.4.2, it has been discovered that HTML placeholder attributes containing data of other database records are vulnerable to cross-site scripting. A valid backend user account is need...

5.4CVSS5.3AI score0.0054EPSS
SaveExploits0References5
NVD
NVD
•added 2020/05/13 11:15 p.m.•50 views

CVE-2020-11064

In TYPO3 CMS greater than or equal to 9.0.0 and less than 9.5.17 and greater than or equal to 10.0.0 and less than 10.4.2, it has been discovered that HTML placeholder attributes containing data of other database records are vulnerable to cross-site scripting. A valid backend user account is need...

5.4CVSS6.1AI score0.0054EPSS
SaveExploits0References1
Prion
Prion
•added 2020/05/13 11:15 p.m.•24 views

Cross site scripting

In TYPO3 CMS greater than or equal to 9.0.0 and less than 9.5.17 and greater than or equal to 10.0.0 and less than 10.4.2, it has been discovered that HTML placeholder attributes containing data of other database records are vulnerable to cross-site scripting. A valid backend user account is need...

3.5CVSS5.4AI score0.0054EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/05/13 10:50 p.m.•56 views

CVE-2020-11064 Cross-Site Scripting in TYPO3 CMS

In TYPO3 CMS greater than or equal to 9.0.0 and less than 9.5.17 and greater than or equal to 10.0.0 and less than 10.4.2, it has been discovered that HTML placeholder attributes containing data of other database records are vulnerable to cross-site scripting. A valid backend user account is need...

5.4CVSS5.4AI score0.0054EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/05/13 12:00 a.m.•4 views

CVE-2020-11064: Improper Neutralization of Input During Web Page Generation

In TYPO3 CMS greater than or equal to 9.0.0 and less than 9.5.17 and greater than or equal to 10.0.0 and less than 10.4.2, it has been discovered that HTML placeholder attributes containing data of other database records are vulnerable to cross-site scripting. A valid backend user account is need...

5.4CVSS5.7AI score0.0054EPSS
SaveExploits0References3
Rows per page
Query Builder